Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.mft
File:                     e60c8d18-b5ca-4397-838f-45c2e16a1a7a.mft (raw, json)
Hash identifier:          67DWD/dKGpnQIPhfbEluVTsec1BBfeGofutK/AOPhlI=
Subject key identifier:   64:CA:B6:8D:72:4F:E0:92:EF:43:ED:AC:0A:3C:7D:26:84:88:15:FF
Authority key identifier: 16:07:A1:04:B1:F6:A6:12:15:88:D8:50:BE:26:41:29:AC:3C:5A:99
Certificate issuer:       /CN=e60c8d18-b5ca-4397-838f-45c2e16a1a7a
Certificate serial:       010D0C9F43285849568E59B64623B38002EC9000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.mft
Manifest number:          010D0C9F4328584073A8554F5C1BC42736B2B300
Signing time:             Fri 28 Mar 2025 13:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 13:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 13:00:00 +0000
Files and hashes:         1: e60c8d18-b5ca-4397-838f-45c2e16a1a7a.crl (hash: j/4CsLJkxuOwANCCLdNorcHC3oABB2tHstr+XGOsBes=)
                          2: ec2b1cea-8c10-323d-a380-9cd5525e33b8.roa (hash: zavkgrtophDq4QKE1swuYy9zneBGUsLp18nmGXVQzCI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:8e:59:b6:46:23:b3:80:02:ec:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60c8d18-b5ca-4397-838f-45c2e16a1a7a
        Validity
            Not Before: Mar 28 13:00:07 2025 GMT
            Not After : Mar 31 13:00:00 2025 GMT
        Subject: CN=3f0d7758-295c-49e8-9447-db70e13738e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:53:c4:f4:ae:39:b0:7b:75:00:62:ca:c3:
                    c0:ec:18:2c:b3:79:36:36:98:40:b3:61:78:53:d5:
                    d1:b5:1f:de:49:bf:70:50:dd:7e:0a:94:bb:07:06:
                    68:e2:8f:98:a6:06:33:f5:e4:09:0d:ca:41:bc:2d:
                    4a:d3:a9:b2:fa:26:21:0c:95:56:00:e6:70:2f:ef:
                    5c:a0:ea:c8:99:59:84:0d:27:80:e2:b7:20:d4:b2:
                    f1:e2:ff:9a:4b:dd:11:9e:2e:a9:cf:2c:77:fa:c0:
                    9e:a4:09:8d:2e:a7:15:98:91:c8:22:5c:e7:a1:48:
                    4f:e0:37:e2:ee:b1:ad:4a:cd:fd:90:b5:69:9f:d0:
                    8d:5c:0f:53:f8:3d:e4:9f:7d:27:ad:53:0a:8a:be:
                    54:53:29:10:ea:7a:c2:08:60:3c:48:2e:e9:2c:c3:
                    b4:2e:4c:e1:37:82:59:da:f9:0a:54:ff:bc:84:83:
                    7c:c5:62:83:2e:cf:41:0c:95:9b:dc:61:19:7e:3b:
                    30:1d:96:dc:bd:0d:26:3d:49:28:1b:78:6b:96:ac:
                    be:7a:b4:ff:85:d7:8e:46:dd:be:7d:9d:66:1d:a8:
                    17:c1:52:4c:a4:6e:9c:54:f6:26:f2:70:a1:af:74:
                    62:ba:d6:fa:8b:cd:96:a7:4f:1f:9c:74:67:60:56:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CA:B6:8D:72:4F:E0:92:EF:43:ED:AC:0A:3C:7D:26:84:88:15:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.crl

            X509v3 Authority Key Identifier:
                keyid:16:07:A1:04:B1:F6:A6:12:15:88:D8:50:BE:26:41:29:AC:3C:5A:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:03:6a:e1:86:26:f4:67:b5:0b:54:12:4a:8b:ce:50:8c:
         9d:73:b2:3c:24:f2:39:6d:22:7e:71:1a:09:54:97:54:58:1a:
         d7:99:19:8c:4f:79:2b:4f:0e:6d:60:34:63:9e:24:e5:c8:a8:
         78:06:4f:67:5c:94:17:97:7b:73:71:90:c1:af:10:b7:51:bd:
         b6:ab:48:e2:41:29:11:59:d0:50:29:37:32:be:34:ce:f3:ad:
         f0:f1:33:9b:39:f0:d1:11:e4:40:42:bb:91:20:86:cf:d9:a5:
         db:da:1a:cd:51:cf:8f:c0:58:39:19:70:6a:bc:ed:4b:77:fc:
         96:da:60:44:ba:ec:43:25:8d:2a:f8:8b:9f:78:4a:ee:f2:48:
         97:a6:07:02:0f:d5:a2:7f:32:27:cf:37:43:f4:08:e2:3e:ce:
         f8:8d:f1:ca:09:7b:e3:ca:d4:65:6d:f6:c1:7a:6c:21:98:14:
         17:31:20:9c:6d:7c:e1:61:b3:08:2c:98:7e:53:b0:ce:ee:b3:
         ae:d2:0f:65:cc:91:a3:4a:95:c8:6f:f9:72:94:91:ce:d8:52:
         39:a9:df:e0:3f:fe:5a:a9:4a:b3:14:27:8e:91:f1:65:ab:eb:
         f9:b0:14:36:9d:80:ba:e6:c6:67:48:2b:f6:34:e9:a1:f0:d7:
         4e:16:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----